1. Purpose and scope
Keys are injected, software is flashed, lifecycle states are set and debug is locked during production. Each of these steps, done badly, can expose the whole fleet. This stage applies the cybersecurity requirements for production in a production cybersecurity control plan and checks that the plant, the test program and the suppliers follow it.
Key provisioning is the most sensitive part. Keys must be generated and injected in a protected environment, records kept without exposing secrets, and access limited to those who need it. Debug and test access must be locked in the production configuration and the lock checked on parts leaving the line.
The stage ends with the release for post-development: the decision that the item may leave development because production is controlled and monitoring, incident response and update processes are ready. The support period is decided here, because customers and authorities need to know how long the item will be supported.
12 more sections for registered members.